MMR Information Systems, Inc., which through its wholly-owned operating subsidiary, MyMedicalRecords, Inc. (collectively, "MMR") provides consumer-controlled Personal Health Records ("PHRs")and electronic safe deposit box storage solutions, has announced it has secured insurance to help protect its customers, clients, affiliates, doctors and users from actual loss or damage up to
"We believe we are the first provider of online Personal Health Record or virtual safe deposit box products to offer this type of protection to our users," said
MMR's products, its MyMedicalRecords PHR, and virtual Safe Deposit Box, provide a secure and easy-to-use way to store medical records and other important documents. Both products are designed so that the user has 100% control over how they file and manage information in their account and who they share it with. User accounts are accessible through unique UserID and password combinations. MMR's proprietary system disables access to any account after an excessive number of attempts to enter with an incorrect password. MMR also uses Secure FTP (File Transmission Protocol) to move information between its telephony platform and a user's account. All user information is stored in an encrypted format and no customer service personnel have access to information stored in a user's account.
Information in MMR user accounts is stored in two Tier IV data centers, 100 miles apart, with redundancy down to the power supplies. These Tier IV data centers have been certified through ongoing SAS 70 reviews. MMR's platforms are also protected by multiple firewalls. And unlike other Personal Health Record services that ask users to fax their medical information to customer service representatives who then place the records into their account, when using MMR products a user's records go directly into his or her personal MyMedicalRecords.com or MyEsafeDeposit.com account with no third-party intervention whatsoever.
Users can only upload information into their MMR account after they have logged in and are on a secure, encrypted link. Uploaded information is scanned for viruses prior to storage and potentially dangerous executable and script files are not allowed. MMR's proprietary system is continually monitored by a third party service for any weakness and vulnerability.
Coverage under the insurance policy can also extend to MMR's private label corporate customers who offer the company's products and services to their employees, clients and affiliate group members. In addition, the coverage provides protection for patients who sign up for MMR services through their doctor's office or through MMRPatientView, a feature of MMR Pro that will be previewed at the upcoming HIMSS09 Conference in
"Privacy groups continue to be concerned about the safety and security of user data in Personal Health Record accounts," said Lorsch. "We already have addressed these concerns and now we are going a step beyond by offering this insurance."